Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2c4df1d4-d9c0-3a1c-8f4f-ddc9b1eb4f74.roa
File:                     2c4df1d4-d9c0-3a1c-8f4f-ddc9b1eb4f74.roa (raw, json)
Hash identifier:          80pr0ohtSdioOOdpUOG3znRyhHwk9qCVEMsuhllQVF4=
Subject key identifier:   03:26:E1:A1:A4:68:AE:62:8F:7E:BC:31:02:70:13:B2:D1:EA:1E:4D
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A7780A46883DDEB6EBA6CD880
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2c4df1d4-d9c0-3a1c-8f4f-ddc9b1eb4f74.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     376
IP address blocks:        206.167.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a4:68:83:dd:eb:6e:ba:6c:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=ccf234f6-49d8-49e7-8515-c094d8768bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:33:59:aa:39:95:b6:c7:f2:f0:c1:a3:9d:
                    a1:c4:95:7a:67:74:c9:65:00:de:d9:e6:a8:e0:7f:
                    09:a9:fb:96:53:05:53:52:b2:2e:f7:28:50:1c:12:
                    14:bf:95:aa:b1:0a:5c:11:3c:2c:ce:09:df:45:5d:
                    63:66:b7:06:68:ae:0f:80:7f:d6:44:e9:c1:1b:c6:
                    15:01:07:54:1e:16:56:72:b4:ff:62:d3:2e:2f:6b:
                    7f:e5:2d:95:74:56:17:13:28:58:92:0d:a3:10:fd:
                    bd:f0:3e:35:03:43:40:49:89:19:fe:0d:bb:80:06:
                    51:7d:7b:46:ab:73:9f:33:e1:7d:5f:61:46:54:f6:
                    40:94:5b:99:d0:02:3b:31:a2:fc:68:24:fc:c6:ed:
                    ee:89:8b:66:ea:e6:81:ec:31:10:64:e4:2b:ad:b5:
                    47:92:4f:1d:75:d5:7d:7e:79:62:55:9c:c5:da:89:
                    cd:42:8c:53:59:0f:7c:21:f0:6d:96:3e:91:9a:c6:
                    60:bb:24:5b:0e:59:15:85:11:87:0e:51:15:ab:51:
                    1c:55:9c:49:0b:c9:4b:2f:2e:c4:ac:2b:cb:d5:6f:
                    2d:35:30:67:5d:03:01:cc:ee:cf:37:5a:48:88:aa:
                    52:89:dd:28:19:81:86:0a:7a:91:7c:e0:4c:f1:06:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:E1:A1:A4:68:AE:62:8F:7E:BC:31:02:70:13:B2:D1:EA:1E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2c4df1d4-d9c0-3a1c-8f4f-ddc9b1eb4f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:9a:e3:fd:95:6e:7c:43:d8:e6:63:ce:8e:23:ba:16:bf:
         99:ba:0a:a2:e6:da:ab:be:a3:18:0e:4d:72:b3:30:81:6d:2d:
         d6:a3:b7:a7:a7:80:54:6e:2f:78:d7:df:c1:bb:47:eb:e0:06:
         2a:5f:c3:3f:5d:a4:4e:bf:f7:4f:03:eb:b1:1e:7f:f1:8b:69:
         60:e6:27:5d:99:e4:67:74:2b:dc:97:c1:40:7e:37:f4:ac:c0:
         58:5b:78:a7:b8:b3:3d:85:13:bf:a8:6b:d4:4c:fd:b2:bb:41:
         a7:3f:42:c6:a6:ac:ac:b1:cc:4a:75:80:98:f4:8b:18:77:ed:
         a3:7d:db:cc:19:2d:c5:ee:f4:16:df:82:70:ec:30:d4:81:3f:
         bd:e5:31:73:4c:6a:b9:83:2e:47:85:f4:13:a5:2a:df:75:d0:
         49:76:56:7e:ce:3d:0b:67:c5:5a:e0:47:49:96:00:2e:63:92:
         c7:a4:1c:cd:2b:24:bb:cc:5c:56:ac:d0:50:3c:18:56:21:be:
         68:c8:59:11:19:ee:ee:7e:f1:3b:ac:b0:4f:09:66:56:70:d9:
         1f:6f:ba:e2:de:9f:57:cd:19:1e:46:61:e3:5b:4e:b3:fa:e5:
         5c:3e:e3:05:a8:c4:09:a5:3d:0c:a7:db:3f:8c:d9:7a:48:22:
         b7:5c:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:22:17 2025 by rpki-client